ScanMalware.com

Security Scan Report: toem.se

Redirected to:
https://toembeauty.com/en-de
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/7723199b-7807-4da2-af40-1ff88f376affDomain and IP registration (RDAP)/api/v1/rdap/7723199b-7807-4da2-af40-1ff88f376affHow often this domain was scanned/api/v1/domain/stats/toem.seScan history for this domain/api/v1/domain/history/toem.se?limit=15
This website contacted 6 IPs in 3 countries across 7 domains to perform 278 HTTP transactions. The main domain is toem.se.

Submitted URL: https://toem.se

Effective URL:
https://toembeauty.com/en-de
Redirected

AI Security Verdict

Low Risk

Confidence: 78%

2
Risk Score

Legitimate Shopify cosmetics store (Toém Beauty) reached via a cross-domain redirect; self-branded, no credential or payment form on the page and no threat-intel, YARA or IDS findings.

Safety Factors (4)
Self-branding: page title/meta 'Toém Beauty' matches the final destination domain
No credential or payment fields anywhere on the page
Shopify-hosted storefront with standard commerce and newsletter forms
No threat-intelligence, JavaScript malware, or network IDS signals
Domain age information unavailable

Details

Page Title

Toém Beauty

Scan Type

public

Domain Name Analysis

The domain name 'toem.se' uses the Swedish country-code top-level domain (.se). The second-level label 'toem' is 4 characters long split between two vowels and two consonants. Word splitting yields two words: to, em. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://toem.se

Page Load Overview

14.00s
Total Load Time
3.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:3,854 chars
Detector Agreement:100%

Website Classification

Primary Category

news media journalism51% confidence
Type: spa
Method: ml+structural

All Detected Categories

news media journalism
51%
e-commerce shopping
35%
adult content
30%
e-commerce
20%

Detected Features

Products
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4823.227.38.65Cloudflare · CDNOttawa, Ontario, Canada
AS13335Cloudflare, Inc.
4634.144.250.199Google · CDNKansas City, Missouri, United States
AS396982Google LLC
4634.160.147.240Google · CDNKansas City, Missouri, United States
AS396982Google LLC
4623.227.39.20Cloudflare · CDNOttawa, Ontario, Canada
AS13335Cloudflare, Inc.
4634.128.177.21Google · CDNKansas City, Missouri, United States
AS396982Google LLC
4623.52.180.4Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
2786--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16984F790E0B15C79002FA2F9B9287B5477A7E327D3864BE4B6AC07641FC5FE9281B11D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:gnj0OKJrjkgWkkB2hrv11OBvlErFM1Bq2OV89Q3GicEo:Y8Q1icEo

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:374172:ETxASKBLUgIOgBQQAiEJABWIhAyRIUG4DP2KGhIIII7EjQACgDYSkBHClCOAUEGckwCMGAhnUyYxgJBgjqQUHAgrICRDkgA6

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:260210383b183c37
Perceptual Hash:8c7632c889d9e5dc
Difference Hash:eccce4b2b3f2f0ed
Wavelet Hash:77061a3b3b183c37
Color Hash:#77862d

Other Hashes

Crop Resistant:2dad6e4e6eaece2e,8c8cb6eaf0b681a1,eccce4b2b2f2f0ee

Scan History

Scan history not available

Unable to load historical scan data